last executing test programs: 5.241310092s ago: executing program 2: socket(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x35, 0x701, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) 5.115012385s ago: executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x20, r2, 0x0, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x2, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1240, 0x60000}}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c704c35392215752cb684af6000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000100000000000000"], 0xb8}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r7, &(0x7f00000002c0), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r4}, &(0x7f0000000700), &(0x7f0000000740)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.00855092s ago: executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x88a8ffff, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f47b0c0d"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) 4.871779173s ago: executing program 2: socket(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x35, 0x701, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) 4.700860701s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2}, 0x14}}, 0x0) 4.530762131s ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0xfffffffb, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x74, 0x2, [@TCA_HTB_INIT={0xf}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}]}}, @qdisc_kind_options=@q_fq_codel={{}, {0x0, 0x2, [@TCA_FQ_CODEL_INTERVAL]}}]}, 0xc8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='ext4_remove_blocks\x00', r5}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xb, 0x1}]}}, 0x0, 0x26}, 0x20) syz_emit_ethernet(0x42, &(0x7f0000000280)={@local, @random="cce390677742", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0cbb05", 0x8, 0x2f, 0x0, @private1, @local, {[], @mlv2_report}}}}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)={0x20, 0x0, 0xb21, 0x0, 0x0, {{0x67}, {@void, @val={0xc, 0x12a}}}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000000)=@get={0x1, &(0x7f00000003c0)=""/199, 0x4}) write$binfmt_aout(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xcb) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x1d}]}, 0x28}}, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, r8, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="180000007fffffff000000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014002a8527a38943dd5900008500000083000100bf090000000000005509010000000000950000000000000095000000000000008520000004000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0xdd, &(0x7f00000003c0)=""/221, 0x41100, 0x4, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xe, 0xf0, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000240)=[r10, r8], &(0x7f0000000640)=[{0x2, 0x2, 0x2, 0x2}], 0x10, 0x9}, 0x90) write$cgroup_int(r8, &(0x7f00000000c0), 0x12) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f00000021c0)=ANY=[@ANYBLOB="18000000690001000000000000000000000002"], 0x18}}, 0x0) write(r5, &(0x7f0000000800)="29f829dcb3a37b97d66872bb9f34dff30106c8a1c58e6cf754f51e5e80e98052bdffb0329e0f7ab55842349a795027573238ff134e9364c4236a4d9bd2ac01e8c65c2d2ad3476b9977bfdc1dce7c0b2e3066183de03e159c9e887fae21be61ca61b5af8a24b24bda1b62c5459e848035", 0x70) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 1.478547128s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x10}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000000), 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8}, 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004c}, 0x90) unshare(0x0) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000080)=0x1, 0x4) r5 = socket(0x2, 0x80802, 0x0) r6 = epoll_create1(0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NFT_BATCH(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000180a0101000000"], 0x2b4}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f00000001c0)={0x20002006, 0x48}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 1.273003815s ago: executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) close(r5) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x85, 0x0, &(0x7f0000000880)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb0100180000000000000024000000de9ecd71792400000006000000100000040000000700000000000000000000000300000000000000001193540ba9b5cccf81ef367f5cc14d3d64d16e1248dc3c50dc6a3b3f60ca67a99024"], 0x0, 0x42, 0x0, 0x8, 0x1000000}, 0x20) socket$igmp6(0xa, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x379, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}, 0x90) r7 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r7, &(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x80, 0x5}}, 0x10) sendmmsg$inet(r7, &(0x7f0000006740), 0x0, 0x0) setsockopt$sock_cred(r7, 0x1, 0x12, &(0x7f00000004c0), 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x4, 0x4, 0x6, 0x800, 0xffffffffffffffff, 0x2, '\x00', 0x0, r6, 0x4, 0x3, 0x2, 0xf}, 0x48) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r8, &(0x7f0000000880)={&(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000003c0), 0x0, &(0x7f00000005c0)=[@rdma_args={0x0, 0x114, 0x1, {{0x6, 0x80}, {&(0x7f0000000400)=""/155}, &(0x7f0000000240)=[{&(0x7f0000000a00)=""/235}, {&(0x7f0000000340)=""/80}, {&(0x7f0000000900)=""/236}], 0x0, 0x4, 0x6}}, @zcopy_cookie={0x0, 0x114, 0xc, 0x101}], 0x54, 0x40000}, 0x4008001) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000031000000b7000000120000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x1, 0x84) 1.208009532s ago: executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x88a8ffff, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f47b0c0d"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)='?\x00\x00\x00', 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) 1.038854944s ago: executing program 0: r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x271b, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x19000) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/89, 0x38}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = epoll_create(0x200005) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)="96a67b36bd06304a08a67f14f6c3881ca6167592ce060670a396f8ab05ace2caca6b2a9ecf3471d2", 0x28}, {&(0x7f0000000500)="fc484e55021886bb", 0x7fffefd8}], 0x2}}], 0x1, 0x0) sendto$inet(r4, &(0x7f0000000000)='o', 0x1, 0x8041, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x42, 0x8000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f00000003c0), 0x4) sendto$phonet(r4, &(0x7f0000019440)="96a0ec6504d82352107542d2666821615298e4db8da3c7d6e231443befb75c900cfe063108229ec532d023c12a55ab6e2003e90e7b47c886fc833deee5c80f73099af07fdc8771147a448aa861672c964c12a8ae5c7cd8e06b30d729c2085583d7978803ab0bf9b515ef1eec659fb8870f99cd7d2917522ad21fe7576d6b5c70c05123aedc354eef9242d9a683dd64ef35ffb65fed8851a23313586b92b43476e8f0960fd7d61404ea51b8c345cc739307699b6d507ea258cd4db1a486a174b554c99a7d30", 0xc5, 0x8050, &(0x7f0000000180)={0x23, 0x81, 0xff, 0x7}, 0x10) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r7, 0x8030942b, &(0x7f00000002c0)={0x5, {0x2, 0x1, 0x0, 0x7, 0x1}}) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000001340)={0x11, @remote, 0xffff, 0x0, 'wrr\x00'}, 0x2c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x5, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 987.60142ms ago: executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000540)={0x20, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0xfea7) r6 = socket$inet6(0xa, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x42, 0x4, 0x1350, 0xffffffff, 0x98, 0x11e0, 0x0, 0xffffffff, 0xffffffff, 0x12b8, 0x12b8, 0x12b8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1148, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@unspec=@limit={{0x48}, {0x0, 0x7}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x3}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'dummy0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13b0) openat$cgroup_int(r7, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) (async) r9 = openat$cgroup_int(r7, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x8) (async) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x8) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, @in={0x2, 0x0, @private=0xa010101}, @in={0x2, 0x4e22}], 0x4c) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000840), &(0x7f0000000880)=0x14) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000840), &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r11 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_wolinfo={0x5, 0x0, 0x1, "5097207e0e55"}}) (async) ioctl$sock_SIOCETHTOOL(r11, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_wolinfo={0x5, 0x0, 0x1, "5097207e0e55"}}) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000007000000050000072909000000efffffff000000045f0000"], 0x0, 0x2b}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x9, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xd, 0xf, &(0x7f0000000040)=""/15, 0x0, 0x0, '\x00', 0x0, 0x25, r12, 0xa, &(0x7f0000000300), 0x8}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x1b, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x2}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x6}, @exit, @map_idx={0x18, 0x3, 0x5, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x3f, 0xfe, &(0x7f0000000480)=""/254, 0x40f00, 0x4d, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x8, 0x7, 0x10001}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000005c0)=[r0, r0, r0, r0, r0], 0x0, 0x10, 0x8}, 0x90) (async) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x1b, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x2}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x6}, @exit, @map_idx={0x18, 0x3, 0x5, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x3f, 0xfe, &(0x7f0000000480)=""/254, 0x40f00, 0x4d, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x8, 0x7, 0x10001}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000005c0)=[r0, r0, r0, r0, r0], 0x0, 0x10, 0x8}, 0x90) unshare(0x20000400) (async) unshare(0x20000400) r14 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r14, 0x104, 0x3, &(0x7f0000000000)=0x100, 0x4) (async) setsockopt$rose(r14, 0x104, 0x3, &(0x7f0000000000)=0x100, 0x4) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0x1b, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000800000000000002d04000018110000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b1b5000000000000185a0000040000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x10000, 0x2, &(0x7f0000000040)=""/2, 0x41000, 0x18, '\x00', r10, 0x5, r12, 0x8, &(0x7f0000000100)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0xd, 0xffff, 0xb19}, 0x10, 0xffffffffffffffff, r13, 0x2, &(0x7f00000006c0)=[r0, r0, r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000700)=[{0x1, 0x2, 0x5, 0x18}, {0x0, 0x2, 0x0, 0x8}]}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0x1b, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000800000000000002d04000018110000", @ANYRES32=r5, @ANYBLOB="000000000003c123d625f20000b7030000000000008500000083000000bf0900000000a3a8a419cb6d8a99fe15c1a301e1699aa7890e2bf408847ecd1cef58b9047cc8c6b7e5c6a814cfd96c9acf59fbe709ce8f8b4d530c08b84c70c2268f653566ffe8ac5ee0e0bb63ba3b267d0a8779cdf00f47e920805f55f93a1b7305472799357baf7e24b1b65cd85d2a4ce9210ce248c0ac86c140b7617fe2b24d9efb7a44cfe6815044b8edeae3b35c06318dbe3ad36f9072206bb7e0cef595c749f599cb046dca26095ab8f3828df35ad59e18671df3fa2d281981fc04ad7992ae785a9dce16cf2e8337e61ba86c32a09579e0a60b03000000761d3b65bc", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b1b5000000000000185a0000040000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x10000, 0x2, &(0x7f0000000040)=""/2, 0x41000, 0x18, '\x00', r10, 0x5, r12, 0x8, &(0x7f0000000100)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0xd, 0xffff, 0xb19}, 0x10, 0xffffffffffffffff, r13, 0x2, &(0x7f00000006c0)=[r0, r0, r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000700)=[{0x1, 0x2, 0x5, 0x18}, {0x0, 0x2, 0x0, 0x8}]}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100697036746e6c00000400028008001b0000000000050011"], 0x44}}, 0x0) 892.087497ms ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x3}, [@initr0, @exit, @alu={0x7, 0x0, 0x9, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c0044"], 0x154}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74030000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32], 0x374}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "378c0593388856b6", "a6784cf38d0decb53c5c83c20e62182a", "4811e039", "6b2376d7739ba5f1"}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x9801}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gre={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x3d}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010102}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xff}]}}}]}, 0x58}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005ac0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @local}}}], 0x20}}], 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 769.33807ms ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x10}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000000), 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8}, 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004c}, 0x90) unshare(0x0) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000080)=0x1, 0x4) r5 = socket(0x2, 0x80802, 0x0) r6 = epoll_create1(0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NFT_BATCH(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000180a0101000000"], 0x2b4}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f00000001c0)={0x20002006, 0x48}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 751.729059ms ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000005000500020000040500010006"], 0x6c}}, 0x0) 718.167062ms ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x5, @local}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000000c0)={r2, 0x1, 0x6, @local}, 0x200000d0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x44, r5, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0xfffffffc}]}, 0x44}}, 0x0) r6 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000280)=0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000010c0)={0x0, 0x1000, "c9cdaea42c990437b2607587edabba870f3762ab391e751135be918cefd4a30a38afc4507bd4df50988a7e9548a4adb28f5165aa9cd7c958fac0011d8f7ccb01c4ec5985b134de68d91b880ed1426d60e2e9a50726cbfa078f0cfeb180107f657d635762041e4293a2b1ef3a8c63c09ec7a4e30b53b2911331404c7fe3e390edcdf0744e754b5f58a4eb78f7d510a395fab13d500985d456dfa0ef5582be8d32bd8fc62aea043b26a1ef9023f5daf5a8b173d3b38ccfc92f5ac108158eadb6c85e3e90e1f897e8adc50dcae315c9d73786e78e95655c60bbe87cce6675f2c9fbff90ea94e2b26545667c285ec43a3b76550388c622284a7b1af11d0de3d8bfa76c77ed4f4d2c1552685ab0a26e7e1d4b121b261cd90a2eb40aa9e660c5c18667f35efa760c143a631911051ee0d75048bfc3a0f7e7298640a8aec81a2bf11233c74ccd987845baed0d21561fc33c10ce87826f89a2e2f613810b3eaf154c2303b6e50bcb4708b1ab706186c0975a32b106dfff91dadced6e1a30d81c0f1bee2b6d3c525116dc6e4d702dafbd1ffe53ee81c156a2c423a21554b896cfdb2d5acaba94c5dc87293c5bb3f16efca9e9abc9eb333433709ec7de34495d8c10c4d2b9954ed559ed4bbd932d149a7f093992a418345aab616d5f72fbcc67a0148b269fed0d0e0df24910f133d14699c37a4f574893317a0b8ad0f1f0d646bd464f5a36c2cfd363a20a30705e8bb001d764c5de1fc26bbdbb7ca8f1b7ba94ee1ebb84d8b4e54340befd6f144e43fc63aad05f9a4dd82d7a0e9acfe0d085293fbbc015750bee0abe08dc99d5ecb1c81d5a956d5ada50fde795a5c7af54ad90eb2b272dda9c35279b22a619a874f6932b5acfd3333a199144eabd1ae76901ed75943a656b60cb307a65ba2d86f899c521c1bcce7d7dd2e7ef29e035690e724a3e3aeb0017dbda4707d6a28b7c30dcc76711498d3cb45f9beba78231cb67b2a2ef0d284e282d42953952b231698f2484e9f0d062995d7859290c7e5eefd379937d6399265f948c82cff6c1c6035e73c43db0b82120512b5e1792c7a0ef912226c85851ac0de60ebe1b7e47b172e181fa3b973cf70baa958360336c398a3166a03eaf8d2c231dafa36455a4296dfe829da9b7f6f30ac0427aa89c1fb957901da9725573cb5e2b376c0f2d74e0365df8e4ee7af7366b7893b42de75358b3c609beabf51a3cdad2c79f4b14aaf8300a054ffe6948723ff6c25100a6515b24525a5758ede036c791358f9e58252133f86e1fcd4de483242f01c217a3ecfad535c0b3f012d3f095c94a6b5f34e3cd438a65910e7a4bba879a4a64e9eaccb60d876e8bdcb4354d4422bf2be3f3592da12cee7239493fd955082cd36f1540214c9968419405defbcfd6b0ca70057acccf1c8337b37cb787a821eb2e46f399d61bbcf542a06a0a82dbb51707e641cf2254e1ff1fcfb2031b97401b422eba4625e5bb3f0e0aff6af58d5a80ee71acf0ff669ecbe6a97841314557775a05d1b416253a6622b135de96e118ce4f6df1ad10ed28d7b76deca5cb13f15db27899fd66d10ca3b52b3dd42ef93b4cf6573717c3b63f770b960fbaf85b9c3d855ac7bc9cafea9ef46ebaed212625390310fe1566aa684ebe01284c7b839fbeaf9e392806f1b922addb8e625a8e1339bfcbf43dc1e786fddd0e857f2ecae6c7310005fc9322f01b50bd35a82556bdc1e6869003752a041b9ae6ab8768885eb30416a00e4096a31a630674afaa3a2038a7392a43c61ae65e890251d45b79a1bd9ff3503be3db4167c1719f7dce638368f305e97e1507f7835d54eaf847363b5102af68729a8a0683ee2cf8012c48dad55494e1ebb0b5094029ffdb61035305b3a9fbef0bdfd3e032494a439fa1c6d1d94751c698b87598ffa3d36a56ffe70c77e6e234929ca20f4fa00fbf99b3b222b07931bf4b6f475306df4d6735dfd98ebfad2ac371a1f41de0b6ba233cdd150b40a1dafef12a9a318747ac64aef8e168a0e2a02fb76cf7c711c01475f4aaa7bb0ccddd12195f63e99d1027d3c5ced222c766a61e4cf088f045a8d328c25a0092851245aafd2c9d27401ab906a7e81c190ec28cd8eb28c7845b7387c7e14efabdee525d3bc1413904c3e8b0eaf8d4da3be3504a262418fbdb994f9cd5416925c30c1dd4d71d7e6e40d3753cbd590569ade752ddd29f8c9d76835f118a373d69f66635f6099614c77879bd386cd2563474ae456ad503384a1d4ad42eddd731d904cf24af76bcdafc5618e6c501cb47c3b200203aeb9db3746adb9f0edded32b5fe145d27b257e67ea12f1f5213da31f3ce65df3377e5302b876211deb75dc23a597d305a1ac3d740c0038a2efc5581348d6646738f1516640154397d8afa8f10b0b80dd34d40a495ce7e7fadb940079c046d8567da78eb6b069fc94efc01be0a1f191f9dbee20230fffcdbb88d211ef63e17e0da0246ad163c1baed5a627ce0d561d1fc0a23e959016425c9cd44265eeb86c8c8b8641b2fa5bb29f77134487e713fbae4587e80c9ff9b9a8d41c030c50ecf40d22d06a406f8a9190aae4e3afc22a946ee3e148c990b9116a0b98f2bf9b1dfb7cd5044a2cb8e2dc7f32e8160c766d1be770ae9b1d1ea9a74c25033950d297a3c274eb5a971c63178a8543d02eca2ca50609b900a5abf8c7308a0725236d0601c3c59a4ce2ed01905b185340230bc922fac11f289b3a6bb061ed40bbb1c8ed03782065fa96b873094ecdcd9e1c530ed4b80c0c488aaf63a427a4d48ae29c87979b4266e9e2b4e56f8e3e466df22a4c7d9e45b24ac03e72e5ed3184dcda4dc9cd43e30f5fd72010b5b7fff56b372937e0f2dfcb2ce1de9e84c713839f0937ad38bd4e780e365da2d657d2907ee920fb864a9fa5e5a59c986bda723ce217a9af7aa2cd927870fce5a28cd19776039fd5ff3ab720fd0867b0a54a9652cdffc9d1ec2046cf090f4eec2c9931ede7ec7c897059b8974583317bca8c6a2abcf14859be660e95c697f8b8f84322676c5f13dfb4789a926ac9d8efd85447de4839dcb17f82d9a9459e1c2e58d8bac1448e1ad33bf8cd5bae145a66bfc9c7eaa97498b90f8dcfc45772b88540df3fc57195b59712b3efdc40f6ecd059cf4f981462ce542e0ea3aabfbcf48b03b30591063fe1b0e5bf4d9a4c6884e405c1a2197760c08f2cb1162be37647a084c4a58e471634cbf9275ea6e7a097239ae3b35577a0c4907d5381f5e191e333d801520d13afbaefbb0c0a8e1da404dc21841012981aee8d81ee24179151ab3b61b9d674fbec37c3cf1860af94a86ff8c05b1af2b56d42b6b6d93dfecd1344835e7af1be20da55e6f0adc2856499259149c96d7352d6a5e916fbdff94a40dfe41a41a0afb1a404440803eef6a16691b160cd5f2673bd4b08ecd74805d2d953698083392a8e0b63701f62632173d6572d986371ad81e0ac165011fc178866f737e6f1b1def620e2b4a17f3b6ae1751c60d265e27815442d595a869e49745c59045adf131fc7df8e735a38c8a44f6bb5bcbb8dba2ab57445e374ab599a7c3a6915401d15e23c822ae389edd03ec61ee1f802720560400f043744198d583d9f13a17268b15271caae98488a60c97f91f5875a7cd5dcf0af37528bfe72f471d289736a5fca7e05c2676b2cc6a16ed8cfc49128923db34e48b50506b227c086b5b924afc0508529dea422a896a46ae0acb2c84a71fe90c857888ea33f25d1bbc23bfce81b5aeb5d72d12b33b5a1c59ee6d84abe8d7e82c75a537fe7d59567679d4b333e3164d52a13934a43a4f8460d3989f9b417d5062a58dc509166316c30c2c384c7ca505999fd6a1c6f08a8429bbae2c1c4511b6ed03f79a01baf140202da2d14a3f4cc4fd72924e2d1f41908124c4c3259a2be5c59a3900df633e20e426c9a0d95764fffb9d04881db410708afd7a029de0807be57d43c397158b127b17ea322d7413777f6f5a616ea33f6cd4f29706d70c101c5b43f1fdda7eb352086741cf83b600ddc1bd1601d11d898bf5cf5b68e350d7942dec652931c42f184e420704956cd2184c98214af2c65580e611dd853086315c726ed6f22752a8b86fbc3df8aca9d7f12408247449aaece4376c09e5c80f92ef2064b00521a58cd32174a2239049501796eff1d229748842a10d6960c8f582319436cc9492481a3c65951bce873a6d5f6e17f3fcdfe54eb960656530c4e343ea32f3fe780184f02f3837a9efd036400cc12d48381a40aa6b668938c8de2031a400c233211b91af9ebe166b6ccb592cc4d67bc13b070595455e49a9933710623d0df66e69892d8588f6fa60e871a90e7fede3988ddb9acc3939dcdde7587b9ba4cbb234e019d887c6a2aa92ecb4d84e1c8a442b279166f8f858b3b30d886f58ac35061b4d4c86b7314f9c60af6ac4aefb5c509aadb80ed81b7a2c61872bb5b2e6194cdba58c9babd95ae75bf4abcb9b58692d486b7add6f30a18f04b3a079f796fc278d5d3430ca23f15003409bc4b7733b56eb72c19bbc7a502dbdc4acb424850c2240424d4be080bdfc9fb46ccdfde4df8e78e72dfc9eb83720c1a075a72379d4e6a0ee30d2425a75841523c27a8209b15016b1b35ba14a0d95bc45d8a81e7c82766536a5739710d54b4c7cabf47d944539f6e76b5b26007256b5f6be38b99f6a5440da416a1c68518a71e60fdc160bdce4a8255a13b1bf3495168d2d836feb73d58daa48dceafc56dcae2826a54099276e00520f6b6918eb776db876d0be03a6b3550a8adf87dd2f12549c64ed5f5449399e29016cf7322eb9aefe9ffb309478a01421b333215333646e8f0b4f2d224573ae4a58bbf880dbf1ee2300cbd7f69c6b1b22da3e2f67a7f34e9869a157b94412295e6abdbccff35cc8e6917358d56fa0701d36f0a40abc672243218edc711d2d6d431892dcd6a28b81d03aae2a6043b680a049d6a4fe6475297e4a4da84782095afa891db679c67f79ed335569b26e71554857302ec2bebfc94c9f28bfb55c84588ebb2db6482e3eac05623e3611cb11de892f75878ba59e254d211b9817a76e5120bf90238cddb6bb46d953b6590fcb5ca9ba5a32e9e6ee84e6b37d903118bc0da7eae33841859f958c486849515b5a8f1bf3af0a172f46d43911a3a5947f77fe6c002024e626c8b58bacd71a6d5aa793274686f5fe2c9fa220a79e6b1e88013defcc8f7c5b20015bb70aa6e3f8e47a63c812d082ab2b6eeea2fb4ed8523ac782bc89d336882b5b00c6f7c25d8ccf6f6f75e511ff0c6c540c33bb406eb525fa4e382c1f1c2e372dfe5e08d464e5bdf8d2f9dec47c37bdfe803d9bd606938d9c11fb7da917568d7928d9e841e4a46f0f668f2b5341b7d9c9b015b1fad8a50949e426e413aa8ee07c746600b3bdbbe7acd6a5da9bbe6444cdf318d35023059043f90c85be2dceac674eaae454957d0e484c81f2f1ea9910e2ea8dc15b5d77a9267d00055ba4408f93245d8ed1ea22a77df2a31b71f40d8cc20c4170b5fc9e9b4231fa7719bf7c6de53d9271cb331ff8c0424fd62c988660a8bec567c2d2f741f2dcfd3b08463a93331ccfa41789def415ab76cca77bc327de39725c5b300b56e4cc63237bf96e1299276583b9428f159fd21d9c01a0559a7fe765b45726a6b65d8870e2dc541db60b529c2eebd4e7554a2bf17b4d624f8295bcf9ad2606aa696c332ba5d7455839ac11810963cca2fea8befc39ad10bf49dc01928b300b38b6986dc14cd813350492b051891ac0484589672b27881e66f612cf95f4dd34dae944efe"}, &(0x7f0000000380)=0x1008) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f00000003c0)={r7, 0x6, 0x5cd7}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010001000900010073797a300000000034000000030a01020000000000000000000000010900030073797a320000000008000b40ffffffe00900010073797a300000000044000000060a01040000000000000000010000000900010073797a3000000000240004802000018007000100727400001400028008000140000000150800024200000003140000001100010000000000000000000000000a"], 0xc0}}, 0x0) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000000000080006400000000005000500020000040500010006"], 0x6c}}, 0x0) 606.238735ms ago: executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x88a8ffff, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f47b0c0d"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)='?\x00\x00\x00', 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) 588.178313ms ago: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) 484.442253ms ago: executing program 4: syz_emit_ethernet(0x3b1, &(0x7f0000000780)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x37b, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201ab3b744efde21038627450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 467.576984ms ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5c00000042006bab9e3fe3d86e17aa31026b876c1d0000007ea60864160af36504001a0038001d007e31a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f005807}, 0x0) 396.452376ms ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x35, 0x701, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) 387.682983ms ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000080000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x1005, &(0x7f00000014c0)=""/4101}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1a, 0x6cca, 0x0, 0x0, 0xc64, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) close(r3) socket$kcm(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e37080c18800cac0f000300", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5c00000042006bab9e3fe3d86e17aa31026b876c1d0000007ea60864160af36504001a0038001d007e31a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f005807}, 0x0) 297.062256ms ago: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060a000409"], 0x44}, 0x1, 0x1000000}, 0x0) 239.011442ms ago: executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f00000000c0)="e8fa", 0x2, 0x4044810, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) 177.065427ms ago: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'veth1_macvtap\x00', {0x100}, 0x2}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 161.325467ms ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x3}, [@initr0, @exit, @alu={0x7, 0x0, 0x9, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c0044"], 0x154}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74030000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32], 0x374}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "378c0593388856b6", "a6784cf38d0decb53c5c83c20e62182a", "4811e039", "6b2376d7739ba5f1"}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x9801}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gre={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x3d}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010102}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xff}]}}}]}, 0x58}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005ac0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @local}}}], 0x20}}], 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 160.599599ms ago: executing program 1: r0 = socket(0x10, 0x3, 0x80000001) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f00000000c0)=0x10000) connect$inet(r2, &(0x7f0000001fc0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x21, 0x0, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f00000004c0)={r7, 0x94, "eea3a8b0f9a2bfad938ccf38dec73bc1048578e2b597d731b9226681446f87553c8716d71621a9f8152b96b1ae4ad35a62162458d3fdf69b7885e3732ae65ebc12e58e65221a46840cfbd9c1548fcdc6a9b097429bf3c03691022338910b306adad2d40b21851e44aa14963beba07ff9a8955525b9b245ea9d05afff28afec4a195b320059271ac82803cede0e480a7f05201af3"}, &(0x7f0000000200)=0x9c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) close(r8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r9}, 0x10) write$cgroup_type(r6, &(0x7f0000000140), 0x9) bind$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x21, @fixed}, 0xe) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x3}, &(0x7f00000000c0)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff4, 0xffff}, {0xa, 0x10}}}, 0x24}}, 0x20000040) 110.012353ms ago: executing program 3: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x0, @mcast1, 0x5}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)="f4000900062b2f25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 74.500416ms ago: executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x0, @mcast1, 0x5}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)="f4000900062b2f25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 17.93041ms ago: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) 0s ago: executing program 3: r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x271b, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x19000) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/89, 0x38}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = epoll_create(0x200005) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)="96a67b36bd06304a08a67f14f6c3881ca6167592ce060670a396f8ab05ace2caca6b2a9ecf3471d2", 0x28}, {&(0x7f0000000500)="fc484e55021886bb", 0x7fffefd8}], 0x2}}], 0x1, 0x0) sendto$inet(r4, &(0x7f0000000000)='o', 0x1, 0x8041, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x42, 0x8000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f00000003c0), 0x4) sendto$phonet(r4, &(0x7f0000019440)="96a0ec6504d82352107542d2666821615298e4db8da3c7d6e231443befb75c900cfe063108229ec532d023c12a55ab6e2003e90e7b47c886fc833deee5c80f73099af07fdc8771147a448aa861672c964c12a8ae5c7cd8e06b30d729c2085583d7978803ab0bf9b515ef1eec659fb8870f99cd7d2917522ad21fe7576d6b5c70c05123aedc354eef9242d9a683dd64ef35ffb65fed8851a23313586b92b43476e8f0960fd7d61404ea51b8c345cc739307699b6d507ea258cd4db1a486a174b554c99a7d30", 0xc5, 0x8050, &(0x7f0000000180)={0x23, 0x81, 0xff, 0x7}, 0x10) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r7, 0x8030942b, &(0x7f00000002c0)={0x5, {0x2, 0x1, 0x0, 0x7, 0x1}}) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000001340)={0x11, @remote, 0xffff, 0x0, 'wrr\x00'}, 0x2c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x5, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.235246][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.261010][ T5112] Bluetooth: hci1: command tx timeout [ 64.292215][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.303172][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.314299][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.326010][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.336056][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.347699][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.359319][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.373129][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.384279][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.399657][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.416342][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.430952][ T5112] Bluetooth: hci2: command tx timeout [ 64.440915][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.451590][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.465712][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.477988][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.490727][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.499932][ T5112] Bluetooth: hci4: command tx timeout [ 64.504630][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.513281][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.513333][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.513345][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.513358][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.513369][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.513382][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.513393][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.513406][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.513974][ T5112] Bluetooth: hci3: command tx timeout [ 64.515240][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.541152][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.549358][ T5109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.628363][ T5109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.637140][ T5109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.645919][ T5109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.656960][ T5189] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 64.695844][ T5114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.730787][ T5114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.749394][ T5114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.760683][ T5114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.818408][ T5184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.854496][ T5184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.909305][ T5195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.930157][ T5195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.984107][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.008179][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.044506][ T5193] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 65.058275][ T5193] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 65.101432][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.109323][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.235637][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.267960][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.297136][ T5200] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 65.356810][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.371507][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.515593][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.529267][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.554140][ T5206] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 65.746899][ T5213] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 65.993029][ T5224] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 66.180878][ T5112] Bluetooth: hci0: command tx timeout [ 66.340242][ T5112] Bluetooth: hci1: command tx timeout [ 66.418368][ T5241] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 66.500204][ T5112] Bluetooth: hci2: command tx timeout [ 66.586274][ T5112] Bluetooth: hci3: command tx timeout [ 66.586325][ T5121] Bluetooth: hci4: command tx timeout [ 66.695015][ T5262] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 66.714450][ T5262] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 66.778144][ T5260] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 66.849996][ T5260] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 67.107315][ T5272] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 67.634047][ T5112] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 67.648440][ T5112] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 67.661710][ T5112] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 67.674600][ T5112] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 67.683617][ T5112] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 67.697421][ T5112] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 68.242785][ T5300] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.680723][ T5255] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.931223][ T5255] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.005159][ T5284] chnl_net:caif_netlink_parms(): no params data found [ 69.167367][ T5255] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.264167][ T5255] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.491103][ T5284] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.498271][ T5284] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.535435][ T5284] bridge_slave_0: entered allmulticast mode [ 69.573886][ T5284] bridge_slave_0: entered promiscuous mode [ 69.616843][ T5284] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.649413][ T5284] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.680296][ T5284] bridge_slave_1: entered allmulticast mode [ 69.682399][ T5348] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.709853][ T5284] bridge_slave_1: entered promiscuous mode [ 69.791063][ T5121] Bluetooth: hci5: command tx timeout [ 69.855179][ T5353] __nla_validate_parse: 4 callbacks suppressed [ 69.855198][ T5353] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 69.903708][ T5284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.963353][ T5284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.280311][ T5255] bridge_slave_1: left allmulticast mode [ 70.288936][ T5255] bridge_slave_1: left promiscuous mode [ 70.315704][ T5255] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.361669][ T5255] bridge_slave_0: left allmulticast mode [ 70.367373][ T5255] bridge_slave_0: left promiscuous mode [ 70.382325][ T5255] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.846911][ T5255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.865254][ T5255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.877236][ T5255] bond0 (unregistering): Released all slaves [ 70.906365][ T5284] team0: Port device team_slave_0 added [ 70.916247][ T5369] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.056466][ T5284] team0: Port device team_slave_1 added [ 71.248222][ T5284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.291164][ T5284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.353889][ T5386] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.365461][ T29] audit: type=1800 audit(1717450481.744:2): pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 71.416243][ T5388] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.416423][ T29] audit: type=1804 audit(1717450481.744:3): pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4082482440/syzkaller.rXmF5D/17/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 71.431250][ T5284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.458602][ T29] audit: type=1804 audit(1717450481.764:4): pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4082482440/syzkaller.rXmF5D/17/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 71.543884][ T29] audit: type=1804 audit(1717450481.764:5): pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4082482440/syzkaller.rXmF5D/17/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 71.616039][ T29] audit: type=1804 audit(1717450481.904:6): pid=5391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4082482440/syzkaller.rXmF5D/17/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 71.659028][ T29] audit: type=1804 audit(1717450481.904:7): pid=5391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4082482440/syzkaller.rXmF5D/17/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 71.705465][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.712419][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.860625][ T5121] Bluetooth: hci5: command tx timeout [ 71.873468][ T5284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.899422][ T5284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.978622][ T5284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.209964][ T5421] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 72.403246][ T5284] hsr_slave_0: entered promiscuous mode [ 72.446017][ T5284] hsr_slave_1: entered promiscuous mode [ 72.465529][ T5284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.484356][ T5284] Cannot create hsr debugfs directory [ 72.537312][ T5434] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.692428][ T5255] hsr_slave_0: left promiscuous mode [ 72.720450][ T5255] hsr_slave_1: left promiscuous mode [ 72.737102][ T5255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.763989][ T5255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.806713][ T5255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.829256][ T5255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.879013][ T5255] veth1_macvtap: left promiscuous mode [ 72.888094][ T5255] veth0_macvtap: left promiscuous mode [ 72.894254][ T5255] veth1_vlan: left promiscuous mode [ 72.900644][ T5255] veth0_vlan: left promiscuous mode [ 72.997588][ T29] audit: type=1800 audit(1717450483.364:8): pid=5444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1950 res=0 errno=0 [ 73.060344][ T29] audit: type=1804 audit(1717450483.404:9): pid=5444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir4278722103/syzkaller.4Cx2xg/18/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 73.086551][ T29] audit: type=1804 audit(1717450483.404:10): pid=5444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir4278722103/syzkaller.4Cx2xg/18/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 73.132051][ T29] audit: type=1804 audit(1717450483.414:11): pid=5444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir4278722103/syzkaller.4Cx2xg/18/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 73.472976][ T5451] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 73.485679][ T5451] File: /root/syzkaller-testdir4278722103/syzkaller.4Cx2xg/19/memory.events PID: 5451 Comm: syz-executor.2 [ 73.529052][ T5451] syz-executor.2 (5451) used greatest stack depth: 18832 bytes left [ 73.607166][ T5453] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.743890][ T5255] team0 (unregistering): Port device team_slave_1 removed [ 73.777051][ T5255] team0 (unregistering): Port device team_slave_0 removed [ 73.949879][ T5121] Bluetooth: hci5: command tx timeout [ 74.587733][ T5471] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 75.502110][ T5284] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.662803][ T5284] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.687325][ T5284] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.738750][ T5284] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.856699][ T5509] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 75.999657][ T5513] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.020349][ T5121] Bluetooth: hci5: command tx timeout [ 76.075024][ T5284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.176742][ T5284] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.221663][ T5521] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 76.261328][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.269186][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.344064][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.351278][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.687253][ T5545] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 76.724848][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 76.724863][ T29] audit: type=1800 audit(1717450487.104:32): pid=5546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1953 res=0 errno=0 [ 76.786969][ T5545] veth0_macvtap: left promiscuous mode [ 76.796994][ T29] audit: type=1804 audit(1717450487.114:33): pid=5546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3728139119/syzkaller.Nzst1u/20/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 76.843456][ T45] cfg80211: failed to load regulatory.db [ 76.945348][ T29] audit: type=1804 audit(1717450487.114:34): pid=5546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3728139119/syzkaller.Nzst1u/20/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 77.017594][ T5548] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 77.060121][ T5548] File: /root/syzkaller-testdir3728139119/syzkaller.Nzst1u/20/memory.events PID: 5548 Comm: syz-executor.4 [ 77.125180][ T29] audit: type=1804 audit(1717450487.134:35): pid=5546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3728139119/syzkaller.Nzst1u/20/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 77.289308][ T29] audit: type=1804 audit(1717450487.234:36): pid=5548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3728139119/syzkaller.Nzst1u/20/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 77.449040][ T29] audit: type=1804 audit(1717450487.234:37): pid=5548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3728139119/syzkaller.Nzst1u/20/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 77.617390][ T5284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.633550][ T29] audit: type=1800 audit(1717450487.614:38): pid=5552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1942 res=0 errno=0 [ 77.730585][ T29] audit: type=1804 audit(1717450487.654:39): pid=5552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir4278722103/syzkaller.4Cx2xg/24/memory.events" dev="sda1" ino=1942 res=1 errno=0 [ 77.813046][ T5566] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 77.829695][ T29] audit: type=1804 audit(1717450487.664:40): pid=5552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir4278722103/syzkaller.4Cx2xg/24/memory.events" dev="sda1" ino=1942 res=1 errno=0 [ 77.872684][ T5112] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.898363][ T5112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.910107][ T5112] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.920314][ T29] audit: type=1804 audit(1717450487.664:41): pid=5552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir4278722103/syzkaller.4Cx2xg/24/memory.events" dev="sda1" ino=1942 res=1 errno=0 [ 77.947950][ T5112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.961770][ T5112] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.971631][ T5112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.987558][ T1046] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.175249][ T5581] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 78.383927][ T1046] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.472672][ T5284] veth0_vlan: entered promiscuous mode [ 78.525684][ T1046] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.717121][ T1046] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.795240][ T5284] veth1_vlan: entered promiscuous mode [ 78.818141][ T5597] ieee802154 phy0 wpan0: encryption failed: -22 [ 78.871699][ T5607] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 78.965679][ T5607] veth0_macvtap: left promiscuous mode [ 79.047062][ T5612] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 79.159037][ T5284] veth0_macvtap: entered promiscuous mode [ 79.367658][ T5284] veth1_macvtap: entered promiscuous mode [ 79.419351][ T5628] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 79.539290][ T1046] bridge_slave_1: left allmulticast mode [ 79.553764][ T1046] bridge_slave_1: left promiscuous mode [ 79.574739][ T1046] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.592473][ T1046] bridge_slave_0: left allmulticast mode [ 79.598158][ T1046] bridge_slave_0: left promiscuous mode [ 79.606377][ T1046] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.004233][ T1046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.015631][ T1046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.032287][ T5112] Bluetooth: hci1: command tx timeout [ 80.041542][ T1046] bond0 (unregistering): Released all slaves [ 80.086449][ T5642] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 80.286387][ T5569] chnl_net:caif_netlink_parms(): no params data found [ 80.326239][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.367600][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.390754][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.419037][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.442907][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.467207][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.478704][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.500916][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.533688][ T5284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.561475][ T5656] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.644262][ T5672] Zero length message leads to an empty skb [ 80.719558][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.757676][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.803112][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.818903][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.838031][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.863986][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.887635][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.902192][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.926711][ T5284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.052655][ T5680] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 81.078780][ T5284] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.117354][ T5284] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.141547][ T5284] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.152389][ T5284] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.204017][ T1046] hsr_slave_0: left promiscuous mode [ 81.211200][ T1046] hsr_slave_1: left promiscuous mode [ 81.217399][ T1046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.229228][ T1046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.276273][ T1046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.302047][ T1046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.355985][ T1046] veth1_macvtap: left promiscuous mode [ 81.367619][ T1046] veth0_macvtap: left promiscuous mode [ 81.400328][ T1046] veth1_vlan: left promiscuous mode [ 81.412666][ T1046] veth0_vlan: left promiscuous mode [ 81.511592][ T5703] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 81.937510][ T1046] team0 (unregistering): Port device team_slave_1 removed [ 81.979489][ T1046] team0 (unregistering): Port device team_slave_0 removed [ 82.102568][ T5112] Bluetooth: hci1: command tx timeout [ 82.269866][ T5690] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 82.284906][ T5699] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.351918][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 82.586556][ T5569] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.604695][ T5569] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.616314][ T5569] bridge_slave_0: entered allmulticast mode [ 82.629468][ T5569] bridge_slave_0: entered promiscuous mode [ 82.662441][ T5569] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.685283][ T5569] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.706401][ T5569] bridge_slave_1: entered allmulticast mode [ 82.716804][ T5569] bridge_slave_1: entered promiscuous mode [ 82.853642][ T5569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.913792][ T5569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.934241][ T5731] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 82.955408][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.986721][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.143459][ T5569] team0: Port device team_slave_0 added [ 83.166506][ T5153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.167817][ T5569] team0: Port device team_slave_1 added [ 83.191318][ T5153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.280810][ T5569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.339116][ T5569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.378042][ T5743] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.461556][ T5569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.481267][ T5749] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 83.511932][ T5569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.525069][ T5569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.615062][ T5569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.645693][ T5747] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 83.702325][ T5759] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.757828][ T5762] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 83.775933][ T5762] IPv6: NLM_F_REPLACE set, but no existing node found! [ 83.854007][ T5569] hsr_slave_0: entered promiscuous mode [ 83.869961][ T5569] hsr_slave_1: entered promiscuous mode [ 83.886840][ T5569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.890527][ T5766] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 83.902130][ T5569] Cannot create hsr debugfs directory [ 83.919867][ T5764] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 83.927458][ T5764] macvlan2: entered promiscuous mode [ 83.937129][ T5764] macvlan2: entered allmulticast mode [ 83.943233][ T5764] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 83.993767][ T5764] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 84.005622][ T5764] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 84.062330][ T5768] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.179980][ T5112] Bluetooth: hci1: command tx timeout [ 84.260574][ T5775] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 84.300228][ T5773] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 84.727589][ T5788] tipc: Started in network mode [ 84.787948][ T5788] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 84.816066][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 84.842636][ T5788] tipc: Enabled bearer , priority 0 [ 84.858285][ T5804] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.898088][ T5799] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 84.923852][ T5789] ieee802154 phy0 wpan0: encryption failed: -22 [ 85.758629][ T5840] team2: Mode changed to "activebackup" [ 85.915665][ T5569] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.960388][ T8] tipc: Node number set to 10463914 [ 86.005582][ T5569] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.089148][ T5569] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.173341][ T5569] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.241250][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 86.270585][ T5112] Bluetooth: hci1: command tx timeout [ 86.291513][ T5861] ieee802154 phy0 wpan0: encryption failed: -22 [ 86.538653][ T5569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.656027][ T5569] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.694243][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.701426][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.784122][ T5890] __nla_validate_parse: 8 callbacks suppressed [ 86.784140][ T5890] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.827837][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.835031][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.901233][ T5897] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.944247][ T5904] mac80211_hwsim hwsim13 ÿÿÿÿÿÿ: renamed from wlan1 (while UP) [ 87.199016][ T5569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.355571][ T5928] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 87.453005][ T5931] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 87.614943][ T5941] dccp_invalid_packet: P.Data Offset(0) too small [ 87.697918][ T5935] ieee802154 phy0 wpan0: encryption failed: -22 [ 87.879513][ T5569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.974158][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 88.134015][ T5569] veth0_vlan: entered promiscuous mode [ 88.176771][ T5569] veth1_vlan: entered promiscuous mode [ 88.285953][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.332217][ T5569] veth0_macvtap: entered promiscuous mode [ 88.512391][ T5981] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 88.520461][ T5569] veth1_macvtap: entered promiscuous mode [ 88.521393][ T5981] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 88.588797][ T5569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.635429][ T5569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.669773][ T5569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.724710][ T5569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.739131][ T5569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.750318][ T5569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.762947][ T5569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.774100][ T5569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.789198][ T5569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.821397][ T5997] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.858084][ T5994] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.879823][ T5994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.930143][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.948550][ T5998] vlan2: entered allmulticast mode [ 88.992476][ T6009] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 89.119052][ T5569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.166605][ T5569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.197281][ T5569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.224006][ T5569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.239530][ T5569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.258435][ T5569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.274520][ T5569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.286274][ T5569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.309801][ T5569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.338419][ T5569] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.354091][ T5569] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.375872][ T5569] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.399769][ T5569] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.424248][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.444551][ T6017] 8021q: VLANs not supported on hsr0 [ 89.701226][ T783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.709089][ T783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.937553][ T6040] bridge_slave_1: left allmulticast mode [ 89.947640][ T6040] bridge_slave_1: left promiscuous mode [ 89.959246][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.959858][ T6056] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 90.087686][ T1046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.139693][ T1046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.165936][ T6063] vlan2: entered allmulticast mode [ 90.642881][ T6084] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 90.984797][ T6100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.215276][ T6116] unsupported nlmsg_type 40 [ 92.332683][ T6168] __nla_validate_parse: 9 callbacks suppressed [ 92.332704][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 92.710777][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.919287][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 92.930933][ T6191] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 93.151842][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.387606][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.434346][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.499145][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.509987][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.589407][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.610812][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.870543][ T5112] Bluetooth: hci1: command tx timeout [ 94.015432][ T6204] dccp_close: ABORT with 32 bytes unread [ 94.229816][ T6251] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 94.300323][ T6251] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 94.366569][ T6251] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 94.469348][ T6251] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 94.513214][ T6251] geneve2: entered allmulticast mode [ 95.521037][ T5121] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.541673][ T5121] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.552027][ T5121] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.560839][ T5121] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.574908][ T5121] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 95.582812][ T5121] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.639425][ T6305] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.649418][ T6305] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.659067][ T6305] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.668350][ T6305] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.677729][ T6305] geneve2: entered allmulticast mode [ 95.999351][ T6301] chnl_net:caif_netlink_parms(): no params data found [ 96.053402][ T6287] dccp_close: ABORT with 32 bytes unread [ 96.218075][ T6329] openvswitch: netlink: Missing key (keys=40, expected=100) [ 96.404926][ T6301] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.446110][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.468503][ T6301] bridge_slave_0: entered allmulticast mode [ 96.511877][ T6301] bridge_slave_0: entered promiscuous mode [ 96.524479][ T6301] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.541325][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.548579][ T6301] bridge_slave_1: entered allmulticast mode [ 96.564882][ T6301] bridge_slave_1: entered promiscuous mode [ 96.710760][ T6301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.742608][ T6301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.755909][ T6351] IPVS: set_ctl: invalid protocol: 136 100.1.1.0:20003 [ 96.832755][ T6351] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20004 [ 96.887977][ T6353] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 96.916059][ T6301] team0: Port device team_slave_0 added [ 96.945982][ T6355] openvswitch: netlink: ufid size 2296 bytes exceeds the range (1, 16) [ 96.963751][ T6301] team0: Port device team_slave_1 added [ 96.988935][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 96.988952][ T29] audit: type=1800 audit(1717450507.364:44): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 97.046019][ T29] audit: type=1804 audit(1717450507.404:45): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir192939185/syzkaller.0AsMc7/38/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 97.166586][ T6301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.174056][ T6301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.209466][ T6301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.244785][ T6301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.255497][ T6301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.325235][ T6301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.451521][ T6301] hsr_slave_0: entered promiscuous mode [ 97.458742][ T6301] hsr_slave_1: entered promiscuous mode [ 97.466655][ T6301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.483509][ T6301] Cannot create hsr debugfs directory [ 97.600555][ T6382] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.621763][ T5112] Bluetooth: hci3: command tx timeout [ 97.636146][ T6382] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 97.807189][ T6301] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.976025][ T6301] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.999544][ T6387] IPVS: set_ctl: invalid protocol: 136 100.1.1.0:20003 [ 98.012797][ T6387] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20004 [ 98.091669][ T6388] __nla_validate_parse: 15 callbacks suppressed [ 98.091687][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.098308][ T6301] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.136561][ T6388] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.277296][ T6301] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.348300][ T6391] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 98.367789][ T6393] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 98.515662][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 98.553103][ T6408] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 98.867190][ T6301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.943308][ T6301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.965402][ T6301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.988135][ T6301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.008976][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.276748][ T6301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.346417][ T6301] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.405193][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.412394][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.456578][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.463799][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.671161][ T6451] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 99.700655][ T5112] Bluetooth: hci3: command tx timeout [ 99.735167][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 99.760864][ T6453] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 99.834590][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.058925][ T6466] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.106700][ T6467] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.151442][ T6301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.304798][ T6301] veth0_vlan: entered promiscuous mode [ 100.363031][ T6301] veth1_vlan: entered promiscuous mode [ 100.474869][ T6301] veth0_macvtap: entered promiscuous mode [ 100.525525][ T6301] veth1_macvtap: entered promiscuous mode [ 100.591417][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.623509][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.668546][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.688114][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.705949][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.736934][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.764662][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.777507][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.787838][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.798819][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.812017][ T6301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.821380][ T6492] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 100.885127][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.927646][ T6492] team0: Port device ÿÿÿÿÿÿ added [ 100.964031][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.997993][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.011654][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.027171][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.053061][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.076458][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.096049][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.120383][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.154579][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.190684][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.212211][ T6301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.287050][ T6301] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.334918][ T6301] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.362788][ T6301] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.378992][ T6301] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.638773][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.660428][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.703275][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.781331][ T5112] Bluetooth: hci3: command tx timeout [ 101.807762][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.859084][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.191954][ T6543] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 102.535022][ T5203] IPVS: starting estimator thread 0... [ 102.639842][ T6553] IPVS: using max 20 ests per chain, 48000 per kthread [ 103.011852][ T6566] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 103.169425][ T6566] bond1: entered promiscuous mode [ 103.176089][ T6571] __nla_validate_parse: 1 callbacks suppressed [ 103.176106][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.287355][ T6578] netlink: 'syz-executor.2': attribute type 44 has an invalid length. [ 103.326848][ T6571] bond1 (unregistering): Released all slaves [ 103.368255][ T6578] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 103.378132][ T6574] wg2: entered promiscuous mode [ 103.385306][ T6574] wg2: entered allmulticast mode [ 103.411203][ T6582] batadv0: entered promiscuous mode [ 103.433160][ T6582] batadv_slave_0: entered promiscuous mode [ 103.446953][ T6582] batadv_slave_0: left promiscuous mode [ 103.461658][ T6582] batadv0: left promiscuous mode [ 103.693731][ T6597] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 103.717420][ T6597] batadv_slave_1: entered promiscuous mode [ 103.859797][ T5112] Bluetooth: hci3: command tx timeout [ 104.193469][ T45] IPVS: starting estimator thread 0... [ 104.289959][ T6619] IPVS: using max 22 ests per chain, 52800 per kthread [ 104.456264][ T6626] netlink: 'syz-executor.0': attribute type 44 has an invalid length. [ 104.558252][ T6626] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 106.155716][ T6668] netlink: 'syz-executor.3': attribute type 44 has an invalid length. [ 106.290994][ T6668] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.594086][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 106.712283][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.735952][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.857570][ T6695] pimreg: entered allmulticast mode [ 106.967729][ T6703] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 106.985184][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.534666][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.254071][ T6754] syz-executor.3 (6754) used obsolete PPPIOCDETACH ioctl [ 108.444885][ T6756] __nla_validate_parse: 2 callbacks suppressed [ 108.444903][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.502384][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 108.509183][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 108.515847][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.523802][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.531873][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.539810][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.547867][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.555829][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.563862][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.571819][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.579847][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.587762][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.595811][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.603760][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.611809][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.619755][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.627766][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.635722][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.643772][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.651731][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.659771][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.667683][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.675750][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.683696][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.691743][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.699678][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.707777][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.715740][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.723777][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.731735][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.739772][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.747694][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.755739][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.763663][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.771687][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.779639][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.787590][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.795529][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.803562][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.811526][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.819546][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.827503][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.835564][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.843501][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.851561][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.859473][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.867534][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.875469][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.883505][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.891445][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.899401][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.907344][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.915385][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.923341][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.931376][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.939287][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.947316][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.955254][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.963324][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.971268][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.979227][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 108.987169][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.998336][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 109.006297][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 109.014363][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 109.022304][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 109.030378][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 109.038290][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 109.046342][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 109.054264][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 109.062311][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 109.070250][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 109.078215][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 109.086146][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 109.094217][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 109.102179][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 109.110227][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 109.118139][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 109.237123][ T6763] vlan2: entered promiscuous mode [ 109.290900][ T6765] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.335240][ T6765] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 109.967024][ T928] IPVS: starting estimator thread 0... [ 110.059826][ T6795] IPVS: using max 20 ests per chain, 48000 per kthread [ 110.133883][ T6802] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1 [ 110.443877][ T6816] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 110.471788][ T6816] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 110.961206][ T6833] TCP: MD5 Hash not found for 172.20.20.187.0->255.255.255.255.20002 [FSP.] L3 index 0 [ 110.993355][ T6834] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 111.132333][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.287308][ T6851] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 111.303230][ T6851] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 111.675436][ T6864] bond0: entered promiscuous mode [ 111.687121][ T6864] bond_slave_0: entered promiscuous mode [ 111.701401][ T6864] bond_slave_1: entered promiscuous mode [ 111.710304][ T6864] batadv0: entered promiscuous mode [ 112.001028][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.089234][ T6874] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 112.108190][ T6880] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 112.474685][ T928] IPVS: starting estimator thread 0... [ 112.482895][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 112.589895][ T6901] IPVS: using max 19 ests per chain, 45600 per kthread [ 112.668728][ T6902] syzkaller0: entered promiscuous mode [ 112.695483][ T6902] syzkaller0: entered allmulticast mode [ 112.740420][ T6902] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 113.461844][ T6937] __nla_validate_parse: 4 callbacks suppressed [ 113.461863][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.702830][ T6943] bond0: entered allmulticast mode [ 113.714986][ T6943] bond_slave_0: entered allmulticast mode [ 113.730368][ T6943] bond_slave_1: entered allmulticast mode [ 113.781574][ T5203] IPVS: starting estimator thread 0... [ 113.844767][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.880058][ T6950] IPVS: using max 19 ests per chain, 45600 per kthread [ 113.898036][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.043009][ T6964] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.170589][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 114.213413][ T6968] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.226635][ T6968] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.520270][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.640448][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.314039][ T7009] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 115.385650][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 115.426320][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 115.445173][ T7012] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.628017][ T7020] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.638035][ T7020] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.647273][ T7020] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.656827][ T7020] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.667163][ T7020] vxlan0: entered promiscuous mode [ 115.672575][ T7020] vxlan0: entered allmulticast mode [ 115.699074][ T7020] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.708212][ T7020] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.717815][ T7020] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.727351][ T7020] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.569314][ T7075] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 116.859381][ T7093] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 116.879886][ T7093] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 116.902466][ T7093] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 117.485730][ T7125] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.495258][ T7125] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.504631][ T7125] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.513869][ T7125] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.560536][ T7125] vxlan0: entered promiscuous mode [ 117.567322][ T7125] vxlan0: entered allmulticast mode [ 117.589163][ T7125] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.598199][ T7125] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.607199][ T7125] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.616359][ T7125] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.342982][ T7164] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 118.573003][ T7170] __nla_validate_parse: 10 callbacks suppressed [ 118.573024][ T7170] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 118.943189][ T7181] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.979668][ T7181] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 119.142964][ T7181] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.180034][ T7181] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 119.333280][ T7181] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.374807][ T7181] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 119.527024][ T7181] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.577749][ T7181] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 119.757601][ T7214] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 119.796729][ T7181] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 119.823642][ T7181] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 119.888298][ T7181] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 119.913869][ T7181] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 119.980247][ T7181] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 120.007728][ T7181] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 120.046773][ T7181] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 120.055908][ T7181] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 120.210823][ T7231] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 120.613568][ T7258] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 120.624359][ T7258] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20000 [ 120.635159][ T7259] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 120.651607][ T7259] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 120.665996][ T7261] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 120.954695][ T7275] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.975071][ T7275] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 121.122997][ T7275] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.171475][ T7275] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 121.338436][ T7275] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.389908][ T7275] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 121.515385][ T7303] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 121.581721][ T7303] 0·: renamed from hsr0 (while UP) [ 121.600994][ T7303] 0·: entered allmulticast mode [ 121.607459][ T7303] hsr_slave_0: entered allmulticast mode [ 121.627919][ T7303] hsr_slave_1: entered allmulticast mode [ 121.640354][ T7303] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 121.711960][ T7275] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.731219][ T7275] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 121.759237][ T7318] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 121.780640][ T7318] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 121.833353][ T7326] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 121.976837][ T7330] x_tables: duplicate underflow at hook 1 [ 121.998280][ T7275] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 122.010280][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.029320][ T7333] nbd: must specify at least one socket [ 122.032036][ T7275] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 122.103519][ T7275] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 122.135040][ T7275] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 122.162752][ T7275] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 122.179286][ T7275] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 122.217874][ T7275] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 122.241737][ T7275] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 123.178529][ T29] audit: type=1800 audit(1717450533.554:46): pid=7391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=1949 res=0 errno=0 [ 123.196857][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 123.292677][ T7398] Cannot find set identified by id 0 to match [ 124.345261][ T5121] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 124.356573][ T5121] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 124.365271][ T5121] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 124.374811][ T5121] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 124.386695][ T5121] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 124.395332][ T5121] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 124.619877][ T29] audit: type=1800 audit(1717450535.004:47): pid=7454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 124.672211][ T5106] syz-executor.1 (5106) used greatest stack depth: 18704 bytes left [ 124.675688][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 124.937589][ T7448] chnl_net:caif_netlink_parms(): no params data found [ 125.113727][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.331758][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.389368][ T7495] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 125.395520][ T7491] xt_l2tp: missing protocol rule (udp|l2tpip) [ 125.404667][ T7495] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 125.427294][ T7486] __nla_validate_parse: 3 callbacks suppressed [ 125.427309][ T7486] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 125.517087][ T7498] x_tables: duplicate underflow at hook 2 [ 125.525478][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.629998][ T7448] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.656802][ T7448] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.674303][ T7448] bridge_slave_0: entered allmulticast mode [ 125.687908][ T7448] bridge_slave_0: entered promiscuous mode [ 125.734765][ T7448] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.771048][ T7448] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.794785][ T29] audit: type=1800 audit(1717450536.174:48): pid=7504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=1955 res=0 errno=0 [ 125.795993][ T7448] bridge_slave_1: entered allmulticast mode [ 125.864872][ T7448] bridge_slave_1: entered promiscuous mode [ 125.909115][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.053297][ T7448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.092267][ T7448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.258434][ T7448] team0: Port device team_slave_0 added [ 126.288534][ T7448] team0: Port device team_slave_1 added [ 126.397410][ T29] audit: type=1800 audit(1717450536.774:49): pid=7525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="blkio.throttle.io_service_bytes_recursive" dev="sda1" ino=1943 res=0 errno=0 [ 126.430025][ T5112] Bluetooth: hci4: command tx timeout [ 126.482662][ T7448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.495093][ T7448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.562214][ T7531] Cannot find set identified by id 0 to match [ 126.562368][ T7448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.618598][ T7448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.621052][ T7537] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 126.633074][ T7448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.651196][ T7536] x_tables: duplicate underflow at hook 2 [ 126.682550][ T7448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.715559][ T7543] netlink: 'syz-executor.0': attribute type 20 has an invalid length. [ 126.753200][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.841919][ T11] bridge_slave_1: left allmulticast mode [ 126.847979][ T11] bridge_slave_1: left promiscuous mode [ 126.854407][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.881073][ T11] bridge_slave_0: left allmulticast mode [ 126.890154][ T11] bridge_slave_0: left promiscuous mode [ 126.910417][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.422347][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.432064][ T11] bond_slave_0: left promiscuous mode [ 127.437662][ T11] bond_slave_0: left allmulticast mode [ 127.445794][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.455526][ T11] bond_slave_1: left promiscuous mode [ 127.461066][ T11] bond_slave_1: left allmulticast mode [ 127.468122][ T11] bond0 (unregistering): Released all slaves [ 127.539356][ T7448] hsr_slave_0: entered promiscuous mode [ 127.591458][ T7448] hsr_slave_1: entered promiscuous mode [ 127.622957][ T7448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.648171][ T29] audit: type=1800 audit(1717450538.024:50): pid=7562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="blkio.throttle.io_service_bytes_recursive" dev="sda1" ino=1956 res=0 errno=0 [ 127.650875][ T7448] Cannot create hsr debugfs directory [ 127.825055][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 127.872417][ T7572] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 127.985037][ T7572] netlink: 'syz-executor.4': attribute type 20 has an invalid length. [ 128.154931][ T11] batadv0: left promiscuous mode [ 128.198463][ T11] hsr_slave_0: left promiscuous mode [ 128.209117][ T11] hsr_slave_1: left promiscuous mode [ 128.222273][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.229904][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.238072][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.245613][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.279164][ T11] veth1_macvtap: left promiscuous mode [ 128.285516][ T11] veth1_vlan: left promiscuous mode [ 128.292259][ T11] veth0_vlan: left promiscuous mode [ 128.500142][ T5112] Bluetooth: hci4: command tx timeout [ 129.227329][ T11] team0 (unregistering): Port device team_slave_1 removed [ 129.285279][ T11] team0 (unregistering): Port device team_slave_0 removed [ 129.794367][ T29] audit: type=1800 audit(1717450540.174:51): pid=7600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="blkio.throttle.io_service_bytes_recursive" dev="sda1" ino=1935 res=0 errno=0 [ 129.842173][ T7604] trusted_key: syz-executor.0 sent an empty control message without MSG_MORE. [ 129.903376][ T7609] unknown channel width for channel at 907000KHz? [ 130.094029][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.260810][ T11] IPVS: stop unused estimator thread 0... [ 130.418572][ T7448] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 130.444923][ T7448] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 130.470488][ T7448] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 130.499022][ T7448] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 130.581293][ T5112] Bluetooth: hci4: command tx timeout [ 130.743275][ T7448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.775795][ T7448] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.796381][ T5207] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.803693][ T5207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.828684][ T5207] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.835886][ T5207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.028965][ T7448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.072861][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.177812][ T7448] veth0_vlan: entered promiscuous mode [ 131.214049][ T7448] veth1_vlan: entered promiscuous mode [ 131.318409][ T7448] veth0_macvtap: entered promiscuous mode [ 131.345241][ T7448] veth1_macvtap: entered promiscuous mode [ 131.394880][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.413237][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.428642][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.447432][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.457402][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.475447][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.489346][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.518517][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.539146][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.558402][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.573939][ T7448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.627015][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.660837][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.689101][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.712858][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.733038][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.747960][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.766055][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.778377][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.805298][ T7679] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 131.820588][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.835637][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.847616][ T7448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.926919][ T7448] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.954302][ T7448] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.984729][ T7448] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.004872][ T7448] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.044275][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.439987][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.447851][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.604734][ T5261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.626629][ T5261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.659994][ T5112] Bluetooth: hci4: command tx timeout [ 132.996580][ T7716] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 133.106506][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.143846][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.150696][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.172387][ T7722] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.419408][ T7738] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.438913][ T7738] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.596642][ T7750] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 134.333999][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 134.818755][ T7794] tipc: Enabling of bearer rejected, failed to enable media [ 134.991652][ T7806] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 135.728258][ T7848] tipc: Can't bind to reserved service type 0 [ 135.900989][ T7853] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 136.114500][ T7866] __nla_validate_parse: 5 callbacks suppressed [ 136.114519][ T7866] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.139633][ T29] audit: type=1800 audit(1717450546.504:52): pid=7872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 136.170513][ T29] audit: type=1804 audit(1717450546.544:53): pid=7872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3728139119/syzkaller.Nzst1u/179/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 136.215395][ T29] audit: type=1804 audit(1717450546.554:54): pid=7872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3728139119/syzkaller.Nzst1u/179/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 136.279152][ T29] audit: type=1804 audit(1717450546.554:55): pid=7872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3728139119/syzkaller.Nzst1u/179/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 136.306917][ T29] audit: type=1804 audit(1717450546.634:56): pid=7877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3728139119/syzkaller.Nzst1u/179/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 136.336599][ T29] audit: type=1804 audit(1717450546.634:57): pid=7877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3728139119/syzkaller.Nzst1u/179/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 136.582234][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.641064][ T7892] dummy0: entered promiscuous mode [ 136.654280][ T7892] macvtap1: entered promiscuous mode [ 136.692442][ T7892] macvtap1: entered allmulticast mode [ 136.697895][ T7892] dummy0: entered allmulticast mode [ 136.737594][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.778667][ T7908] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 136.827989][ T7903] dummy0: left allmulticast mode [ 136.844345][ T7903] dummy0: left promiscuous mode [ 136.858292][ T7903] macvtap1: left promiscuous mode [ 136.868878][ T7903] macvtap1: left allmulticast mode [ 136.884718][ T7895] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 136.909684][ T7895] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.011678][ T7919] sctp: [Deprecated]: syz-executor.3 (pid 7919) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.011678][ T7919] Use struct sctp_sack_info instead [ 137.160918][ T7935] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.392138][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.526538][ T7957] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.543157][ T7955] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 137.564414][ T7955] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.577072][ T29] audit: type=1800 audit(1717450547.954:58): pid=7962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 137.700013][ T29] audit: type=1804 audit(1717450548.064:59): pid=7962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3728139119/syzkaller.Nzst1u/184/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 137.734883][ T29] audit: type=1804 audit(1717450548.074:60): pid=7962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3728139119/syzkaller.Nzst1u/184/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 138.231896][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 138.669070][ T8011] lo speed is unknown, defaulting to 1000 [ 138.699188][ T8011] lo speed is unknown, defaulting to 1000 [ 138.713325][ T8011] lo speed is unknown, defaulting to 1000 [ 138.721763][ T29] audit: type=1800 audit(1717450549.094:61): pid=8016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 138.831124][ T8018] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.520399][ T8011] infiniband syz0: set active [ 139.525408][ T8011] infiniband syz0: added lo [ 139.538132][ T25] lo speed is unknown, defaulting to 1000 [ 139.654839][ T8011] RDS/IB: syz0: added [ 139.693829][ T8011] smc: adding ib device syz0 with port count 1 [ 139.724951][ T8011] smc: ib device syz0 port 1 has pnetid [ 139.763429][ T8011] lo speed is unknown, defaulting to 1000 [ 139.770670][ T9] lo speed is unknown, defaulting to 1000 [ 140.262874][ T8011] lo speed is unknown, defaulting to 1000 [ 140.623260][ T8089] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 140.885061][ T9] IPVS: starting estimator thread 0... [ 140.895115][ T8102] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 140.895123][ T8011] lo speed is unknown, defaulting to 1000 [ 140.999746][ T8104] IPVS: using max 21 ests per chain, 50400 per kthread [ 141.280649][ T8122] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 141.378838][ T8129] __nla_validate_parse: 6 callbacks suppressed [ 141.378857][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 141.405583][ T8011] lo speed is unknown, defaulting to 1000 [ 141.443973][ T8125] pim6reg1: entered promiscuous mode [ 141.457921][ T8125] pim6reg1: entered allmulticast mode [ 141.495459][ T8132] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 141.614859][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 141.882459][ T8011] lo speed is unknown, defaulting to 1000 [ 142.167871][ T8168] netlink: zone id is out of range [ 142.176732][ T8167] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.188486][ T8168] netlink: zone id is out of range [ 142.194737][ T8168] netlink: zone id is out of range [ 142.200208][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.210153][ T8168] netlink: zone id is out of range [ 142.217927][ T8168] netlink: zone id is out of range [ 142.228508][ T8168] netlink: zone id is out of range [ 142.236270][ T8168] netlink: zone id is out of range [ 142.241803][ T8168] netlink: zone id is out of range [ 142.258953][ T8168] netlink: zone id is out of range [ 142.274324][ T8168] netlink: zone id is out of range [ 142.291378][ T8011] lo speed is unknown, defaulting to 1000 [ 142.496175][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.625690][ T8158] rdma_rxe: rxe_newlink: failed to add lo [ 143.052246][ T8200] team0: entered promiscuous mode [ 143.067211][ T8200] team_slave_0: entered promiscuous mode [ 143.086566][ T8200] team_slave_1: entered promiscuous mode [ 143.102995][ T8206] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.118006][ T8198] team0: left promiscuous mode [ 143.139797][ T8198] team_slave_0: left promiscuous mode [ 143.146871][ T8198] team_slave_1: left promiscuous mode [ 143.271765][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 143.286548][ T8213] rdma_rxe: rxe_newlink: failed to add lo [ 143.445689][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 143.485946][ T8221] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 143.516864][ T8221] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.305046][ T8321] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 145.327140][ T8320] geneve3: entered promiscuous mode [ 145.339927][ T8320] geneve3: entered allmulticast mode [ 146.035770][ T8360] ieee802154 phy0 wpan0: encryption failed: -90 [ 146.456680][ T8386] __nla_validate_parse: 11 callbacks suppressed [ 146.456699][ T8386] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 146.482591][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 146.724969][ T8399] vlan2: entered promiscuous mode [ 146.789777][ T8403] ieee802154 phy0 wpan0: encryption failed: -90 [ 147.063351][ T8419] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 147.157224][ T8424] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 147.165885][ T8424] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 147.181518][ T8425] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.201586][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 147.645845][ T8448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 147.674111][ T8448] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.1'. [ 147.761974][ T8453] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 147.857120][ T8459] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 147.927261][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.004791][ T8466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.274993][ T8486] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 148.338423][ T8487] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 148.663574][ T8515] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 148.698173][ T8517] sctp: [Deprecated]: syz-executor.2 (pid 8517) Use of int in maxseg socket option. [ 148.698173][ T8517] Use struct sctp_assoc_value instead [ 148.822062][ T8519] lo speed is unknown, defaulting to 1000 [ 150.073526][ T8578] ip6tnl0: entered promiscuous mode [ 150.089335][ T8579] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 150.129131][ T8576] ip6tnl0: left promiscuous mode [ 150.646215][ T8610] lo speed is unknown, defaulting to 1000 [ 150.789770][ T8621] ip6tnl0: entered promiscuous mode [ 150.843902][ T8619] ip6tnl0: left promiscuous mode [ 151.515379][ T8653] ip6tnl0: entered promiscuous mode [ 151.588904][ T8651] ip6tnl0: left promiscuous mode [ 151.714329][ T8669] net_ratelimit: 870 callbacks suppressed [ 151.714348][ T8669] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 151.760142][ T8672] __nla_validate_parse: 11 callbacks suppressed [ 151.760160][ T8672] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.790458][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 151.821733][ T8671] netlink: 'syz-executor.0': attribute type 18 has an invalid length. [ 151.894978][ T8671] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.904203][ T8671] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.913014][ T8671] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.921844][ T8671] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.940603][ T8671] vxlan0: entered promiscuous mode [ 152.369946][ T8697] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 152.537479][ T8697] bridge1: port 1(gretap1) entered blocking state [ 152.554562][ T8697] bridge1: port 1(gretap1) entered disabled state [ 152.561571][ T8697] gretap1: entered allmulticast mode [ 152.568898][ T8697] gretap1: entered promiscuous mode [ 153.080957][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 153.421964][ T8740] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.517917][ T8740] bridge1: port 1(gretap1) entered blocking state [ 153.550010][ T8740] bridge1: port 1(gretap1) entered disabled state [ 153.565766][ T8740] gretap1: entered allmulticast mode [ 153.580854][ T8740] gretap1: entered promiscuous mode [ 153.646409][ T8753] delete_channel: no stack [ 154.451803][ T8798] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.595713][ T8804] bridge3: port 1(gretap1) entered blocking state [ 154.616271][ T8804] bridge3: port 1(gretap1) entered disabled state [ 154.635020][ T8804] gretap1: entered allmulticast mode [ 154.647168][ T8804] gretap1: entered promiscuous mode [ 154.942888][ T8821] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 155.388749][ T8850] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 155.532911][ T8854] bridge2: port 1(gretap1) entered blocking state [ 155.566029][ T8854] bridge2: port 1(gretap1) entered disabled state [ 155.582987][ T8854] gretap1: entered allmulticast mode [ 155.604398][ T8854] gretap1: entered promiscuous mode [ 155.676349][ T8864] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 155.772036][ T8840] syzkaller0: entered promiscuous mode [ 155.777782][ T8840] syzkaller0: entered allmulticast mode [ 155.819043][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.618022][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.935959][ T8905] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 158.506576][ T8921] syzkaller0: entered promiscuous mode [ 158.534758][ T8921] syzkaller0: entered allmulticast mode [ 158.553552][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 159.465590][ T8958] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 159.475652][ T8958] nbd: couldn't find device at index 20 [ 159.562214][ T8960] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.945747][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 161.085602][ T8992] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 161.189013][ T8998] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 161.577910][ T9025] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.686467][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 162.815506][ T9101] veth0_vlan: entered allmulticast mode [ 162.889973][ T9108] xt_l2tp: missing protocol rule (udp|l2tpip) [ 162.931613][ T9111] sctp: [Deprecated]: syz-executor.3 (pid 9111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.931613][ T9111] Use struct sctp_sack_info instead [ 162.986404][ T9107] netlink: 'syz-executor.3': attribute type 63 has an invalid length. [ 163.051121][ T9107] __nla_validate_parse: 4 callbacks suppressed [ 163.051142][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 163.111209][ T9107] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 163.166865][ T9106] geneve2: entered promiscuous mode [ 163.185874][ T9106] geneve2: entered allmulticast mode [ 163.235334][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 163.255686][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 163.508462][ T9144] syz-executor.0 (9144) used greatest stack depth: 18608 bytes left [ 163.782887][ T9163] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 163.890119][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.165826][ T9190] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 164.233795][ T9190] lo speed is unknown, defaulting to 1000 [ 164.553755][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.641124][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 164.731316][ T9224] vlan2: entered allmulticast mode [ 165.056400][ T9242] x_tables: duplicate underflow at hook 2 [ 165.397616][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 165.686467][ T9269] lo speed is unknown, defaulting to 1000 [ 166.187115][ T9287] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 166.223373][ T9287] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 166.507462][ T9305] atomic_op ffff88805b138998 conn xmit_atomic 0000000000000000 [ 166.670046][ T9311] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 166.796051][ T9311] lo speed is unknown, defaulting to 1000 [ 166.954001][ T9323] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 167.784864][ T9360] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 167.844763][ T9360] : entered promiscuous mode [ 168.115060][ T9375] __nla_validate_parse: 4 callbacks suppressed [ 168.115079][ T9375] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 168.207703][ T9375] vlan2: entered promiscuous mode [ 168.213492][ T9375] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 168.227089][ T9375] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 168.281897][ T9378] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 168.298182][ T9378] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 168.783691][ T9399] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 168.800752][ T9399] batman_adv: batadv0: Adding interface: wlan0 [ 168.813479][ T9399] batman_adv: batadv0: Interface activated: wlan0 [ 168.970211][ T9414] vlan2: entered promiscuous mode [ 168.991479][ T9414] dummy0: entered promiscuous mode [ 169.017681][ T9414] team0: Port device vlan2 added [ 169.075687][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.256293][ T9427] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 169.288959][ T9427] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.698316][ T9444] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 169.758508][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 169.896499][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 169.896516][ T29] audit: type=1800 audit(1717450580.274:64): pid=9458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 169.950924][ T9463] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 169.962306][ T9460] tap0: tun_chr_ioctl cmd 2147767511 [ 170.189160][ T29] audit: type=1800 audit(1717450580.564:65): pid=9469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 170.289386][ T29] audit: type=1804 audit(1717450580.664:66): pid=9469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2116025903/syzkaller.gXBlHS/208/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 170.319366][ T9469] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 170.335044][ T29] audit: type=1804 audit(1717450580.664:67): pid=9469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2116025903/syzkaller.gXBlHS/208/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 170.380663][ T9476] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 170.392830][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 170.426956][ T9476] lo speed is unknown, defaulting to 1000 [ 170.622329][ T9483] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 170.774468][ T9491] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 170.779846][ T9493] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 170.857053][ T9487] tipc: Failed to remove unknown binding: 66,1,1/0:645926690/645926692 [ 170.882836][ T9487] tipc: Failed to remove unknown binding: 66,1,1/0:645926690/645926692 [ 170.916224][ T9486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.973337][ T9486] bond0: (slave bond1): Enslaving as an active interface with an up link [ 171.065169][ T9506] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.107172][ T9506] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 58585 - 0 [ 171.146453][ T9506] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 58585 - 0 [ 171.167014][ T9506] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 58585 - 0 [ 171.185003][ T9506] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 58585 - 0 [ 171.194854][ T9506] geneve3: entered allmulticast mode [ 171.666366][ T9542] dccp_invalid_packet: P.Data Offset(0) too small [ 172.265588][ T9566] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 56978 - 0 [ 172.274367][ T9566] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 56978 - 0 [ 172.283543][ T9566] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 56978 - 0 [ 172.299347][ T9566] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 56978 - 0 [ 172.308083][ T9566] geneve4: entered allmulticast mode [ 172.727084][ T9591] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 172.771957][ T9591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.916601][ T9608] smc: net device lo applied user defined pnetid SYZ2 [ 172.948442][ T9608] smc: net device lo erased user defined pnetid SYZ2 [ 173.124254][ T9617] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 173.174901][ T9625] __nla_validate_parse: 13 callbacks suppressed [ 173.175238][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 173.212232][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 173.317463][ T9633] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 173.367166][ T9633] sctp: [Deprecated]: syz-executor.4 (pid 9633) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.367166][ T9633] Use struct sctp_sack_info instead [ 173.405158][ T9640] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 173.408599][ T9636] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 173.439959][ T9636] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 173.569022][ T9647] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 173.621818][ T9642] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 173.668211][ T9654] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 173.722310][ T9648] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.1'. [ 173.734967][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.926605][ T29] audit: type=1800 audit(1717450584.304:68): pid=9666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1955 res=0 errno=0 [ 173.990372][ T9666] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 174.000949][ T29] audit: type=1804 audit(1717450584.354:69): pid=9666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir122492803/syzkaller.ol4JvE/148/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 174.046267][ T29] audit: type=1804 audit(1717450584.354:70): pid=9666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir122492803/syzkaller.ol4JvE/148/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 174.111042][ T9677] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 174.119295][ T9677] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 174.733845][ T29] audit: type=1800 audit(1717450585.114:71): pid=9716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 174.832038][ T29] audit: type=1804 audit(1717450585.114:72): pid=9716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3728139119/syzkaller.Nzst1u/294/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 174.925827][ T29] audit: type=1804 audit(1717450585.114:73): pid=9716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3728139119/syzkaller.Nzst1u/294/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 174.934234][ T9720] macvlan2: entered promiscuous mode [ 174.972823][ T9720] vlan1: entered promiscuous mode [ 175.011916][ T9720] team0: Port device macvlan2 added [ 175.489310][ T9756] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 175.551674][ T9758] macvlan5: entered promiscuous mode [ 175.557660][ T9758] vlan1: entered promiscuous mode [ 175.574652][ T9758] team0: Port device macvlan5 added [ 175.861192][ T9778] hsr_slave_0: left promiscuous mode [ 175.886653][ T9778] hsr_slave_1: left promiscuous mode [ 176.104371][ T9791] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 176.284125][ T9806] macvlan2: entered promiscuous mode [ 176.297195][ T9806] vlan1: entered promiscuous mode [ 176.311849][ T9806] team0: Port device macvlan2 added [ 176.397600][ T9813] pim6reg1: entered promiscuous mode [ 176.415521][ T9813] pim6reg1: entered allmulticast mode [ 176.477272][ T9818] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 176.531055][ T9822] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 176.774838][ T9835] hsr_slave_0: left promiscuous mode [ 176.797708][ T9835] hsr_slave_1: left promiscuous mode [ 176.899119][ T29] audit: type=1800 audit(1717450587.274:74): pid=9844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 176.943458][ T29] audit: type=1804 audit(1717450587.304:75): pid=9844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2366621357/syzkaller.C2Tkef/245/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 176.978510][ T29] audit: type=1804 audit(1717450587.304:76): pid=9844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2366621357/syzkaller.C2Tkef/245/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 177.146048][ T9858] ip6gretap0: entered promiscuous mode [ 177.168516][ T9858] batadv_slave_0: entered promiscuous mode [ 177.191121][ T9858] hsr1: entered allmulticast mode [ 177.201127][ T9858] ip6gretap0: entered allmulticast mode [ 177.223965][ T9858] batadv_slave_0: entered allmulticast mode [ 177.486422][ T9876] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 177.847705][ T9903] syz-executor.4: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 177.865621][ T9903] CPU: 0 PID: 9903 Comm: syz-executor.4 Not tainted 6.10.0-rc1-syzkaller-00239-g93e30878f7ec #0 [ 177.876078][ T9903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 177.886156][ T9903] Call Trace: [ 177.889445][ T9903] [ 177.892393][ T9903] dump_stack_lvl+0x241/0x360 [ 177.897133][ T9903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.902464][ T9903] ? __pfx__printk+0x10/0x10 [ 177.907099][ T9903] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 177.913541][ T9903] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 177.920061][ T9903] warn_alloc+0x278/0x410 [ 177.924421][ T9903] ? stack_depot_save_flags+0x29/0x830 [ 177.929916][ T9903] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 177.936018][ T9903] ? __pfx_warn_alloc+0x10/0x10 [ 177.940906][ T9903] ? kasan_save_track+0x3f/0x80 [ 177.945790][ T9903] ? __kasan_kmalloc+0x98/0xb0 [ 177.950620][ T9903] ? xsk_setsockopt+0x598/0x950 [ 177.955511][ T9903] ? do_sock_setsockopt+0x3af/0x720 [ 177.960750][ T9903] ? __sys_setsockopt+0x1ae/0x250 [ 177.965898][ T9903] ? __x64_sys_setsockopt+0xb5/0xd0 [ 177.971127][ T9903] ? do_syscall_64+0xf3/0x230 [ 177.975830][ T9903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.981929][ T9903] __vmalloc_node_range_noprof+0x130/0x1460 [ 177.987857][ T9903] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 177.994202][ T9903] ? __kasan_kmalloc+0x98/0xb0 [ 177.998979][ T9903] ? xskq_create+0x54/0x170 [ 178.003486][ T9903] vmalloc_user_noprof+0x74/0x80 [ 178.008423][ T9903] ? xskq_create+0xb6/0x170 [ 178.012922][ T9903] xskq_create+0xb6/0x170 [ 178.017254][ T9903] xsk_init_queue+0xa1/0x100 [ 178.021858][ T9903] xsk_setsockopt+0x598/0x950 [ 178.026541][ T9903] ? __pfx_xsk_setsockopt+0x10/0x10 [ 178.031828][ T9903] ? __pfx_lock_acquire+0x10/0x10 [ 178.037019][ T9903] ? aa_sock_opt_perm+0x79/0x120 [ 178.041954][ T9903] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 178.047503][ T9903] ? security_socket_setsockopt+0x87/0xb0 [ 178.053221][ T9903] ? __pfx_xsk_setsockopt+0x10/0x10 [ 178.058418][ T9903] do_sock_setsockopt+0x3af/0x720 [ 178.063449][ T9903] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 178.068992][ T9903] ? __fget_files+0x29/0x470 [ 178.073584][ T9903] ? __fget_files+0x3f6/0x470 [ 178.078276][ T9903] __sys_setsockopt+0x1ae/0x250 [ 178.083142][ T9903] __x64_sys_setsockopt+0xb5/0xd0 [ 178.088188][ T9903] do_syscall_64+0xf3/0x230 [ 178.092687][ T9903] ? clear_bhb_loop+0x35/0x90 [ 178.097364][ T9903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.103265][ T9903] RIP: 0033:0x7ff148a7cee9 [ 178.107681][ T9903] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 178.127282][ T9903] RSP: 002b:00007ff1498100c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 178.135697][ T9903] RAX: ffffffffffffffda RBX: 00007ff148bb3fa0 RCX: 00007ff148a7cee9 [ 178.143667][ T9903] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 178.151641][ T9903] RBP: 00007ff148ac947f R08: 00000000000000eb R09: 0000000000000000 [ 178.159609][ T9903] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 178.167573][ T9903] R13: 000000000000000b R14: 00007ff148bb3fa0 R15: 00007ffce845c568 [ 178.175557][ T9903] [ 178.235393][ T9903] Mem-Info: [ 178.263486][ T9903] active_anon:14307 inactive_anon:0 isolated_anon:0 [ 178.263486][ T9903] active_file:15 inactive_file:48158 isolated_file:0 [ 178.263486][ T9903] unevictable:768 dirty:52 writeback:0 [ 178.263486][ T9903] slab_reclaimable:11327 slab_unreclaimable:101523 [ 178.263486][ T9903] mapped:18608 shmem:1694 pagetables:668 [ 178.263486][ T9903] sec_pagetables:0 bounce:0 [ 178.263486][ T9903] kernel_misc_reclaimable:0 [ 178.263486][ T9903] free:1383352 free_pcp:460 free_cma:0 [ 178.329112][ T9903] Node 0 active_anon:57228kB inactive_anon:0kB active_file:60kB inactive_file:192548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:74432kB dirty:200kB writeback:0kB shmem:5240kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10648kB pagetables:2672kB sec_pagetables:0kB all_unreclaimable? no [ 178.379633][ T9903] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 178.394911][ T9910] __nla_validate_parse: 50 callbacks suppressed [ 178.394931][ T9910] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.426396][ T9903] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.479328][ T9903] lowmem_reserve[]: 0 2571 2571 0 0 [ 178.526580][ T9903] Node 0 DMA32 free:1567328kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:56992kB inactive_anon:0kB active_file:60kB inactive_file:192436kB unevictable:1536kB writepending:400kB present:3129332kB managed:2659880kB mlocked:0kB bounce:0kB free_pcp:3040kB local_pcp:1144kB free_cma:0kB [ 178.589516][ T9903] lowmem_reserve[]: 0 0 0 0 0 [ 178.608731][ T29] audit: type=1804 audit(1717450588.974:77): pid=9921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2366621357/syzkaller.C2Tkef/247/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 178.608931][ T9903] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 178.693627][ T9903] lowmem_reserve[]: 0 0 0 0 0 [ 178.698862][ T9903] Node 1 Normal free:3949876kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB writepending:8kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.736365][ T9903] lowmem_reserve[]: 0 0 0 0 0 [ 178.745825][ T9903] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 178.767292][ T9903] Node 0 DMA32: 469*4kB (UME) 25*8kB (UME) 261*16kB (UME) 117*32kB (ME) 178*64kB (UME) 75*128kB (UM) 38*256kB (UME) 13*512kB (UME) 29*1024kB (UME) 7*2048kB (UM) 360*4096kB (UM) = 1565964kB [ 178.802901][ T9903] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 178.837840][ T9903] Node 1 Normal: 3*4kB (UM) 7*8kB (UM) 9*16kB (UM) 11*32kB (UM) 8*64kB (UM) 4*128kB (UM) 1*256kB (U) 3*512kB (UM) 0*1024kB 3*2048kB (UM) 962*4096kB (M) = 3949876kB [ 178.868493][ T9939] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 178.873198][ T9938] smc: net device lo applied user defined pnetid SYZ2 [ 178.888477][ T9903] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.911558][ T9903] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 178.929896][ T9938] smc: net device lo erased user defined pnetid SYZ2 [ 178.946772][ T9903] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.959375][ T9903] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 178.969876][ T9903] 50242 total pagecache pages [ 178.975967][ T9903] 0 pages in swap cache [ 178.980915][ T9903] Free swap = 124996kB [ 178.985392][ T9903] Total swap = 124996kB [ 178.995413][ T9903] 2097051 pages RAM [ 179.003761][ T9903] 0 pages HighMem/MovableOnly [ 179.022248][ T9903] 400871 pages reserved [ 179.039730][ T9903] 0 pages cma reserved [ 179.162670][ T9948] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 179.212964][ T9953] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 179.242257][ T9954] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 179.262864][ T9953] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.279336][ T9953] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.299504][ T9956] ÿÿÿ: renamed from vlan1 [ 179.486865][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.669490][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.694152][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 179.728193][ T9978] vxcan1: entered promiscuous mode [ 179.758603][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.834855][ T9985] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 180.039231][T10001] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.077450][T10001] vlan2: entered promiscuous mode [ 180.084717][T10001] bridge0: entered promiscuous mode [ 180.115374][T10001] bridge0: left promiscuous mode [ 180.205959][T10011] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 180.411832][T10023] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 180.723597][ T29] audit: type=1804 audit(1717450591.084:78): pid=10038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2366621357/syzkaller.C2Tkef/253/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 180.772728][T10041] hsr_slave_0: left promiscuous mode [ 180.820007][T10041] hsr_slave_1: left promiscuous mode [ 181.113989][T10060] vxcan1: entered promiscuous mode [ 181.303628][ T5111] Bluetooth: hci2: command 0x0406 tx timeout [ 181.944560][T10106] netdevsim netdevsim1 netdevsim1: Unsupported IPsec algorithm [ 182.439001][T10124] vxcan1: entered promiscuous mode [ 182.840789][T10147] netdevsim netdevsim1 netdevsim1: Unsupported IPsec algorithm [ 183.376836][T10171] vxcan3: entered promiscuous mode [ 183.454484][T10171] __nla_validate_parse: 24 callbacks suppressed [ 183.454506][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 183.505066][T10174] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 183.705208][T10179] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 183.892973][T10185] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.0'. [ 183.954771][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 184.214353][T10205] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 184.676248][T10230] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.711785][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.960449][T10243] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.383140][T10264] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 185.680447][T10276] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 185.785979][T10284] netdevsim netdevsim1 netdevsim1: Unsupported IPsec algorithm [ 186.157850][T10305] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.327865][T10319] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 186.512164][T10323] macsec1: entered promiscuous mode [ 186.534972][T10323] macsec1: entered allmulticast mode [ 186.550020][T10323] dummy0: entered allmulticast mode [ 186.824714][T10350] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 186.945853][T10359] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 187.502665][T10398] netdevsim netdevsim1 netdevsim1: Unsupported IPsec algorithm [ 187.995377][T10430] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 188.685955][T10479] bond0: (slave bond_slave_0): Releasing backup interface [ 188.759151][T10483] __nla_validate_parse: 15 callbacks suppressed [ 188.759172][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 188.821975][ T5111] Bluetooth: hci4: command 0x0405 tx timeout [ 189.113388][T10495] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.180563][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.215942][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.573639][T10523] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 189.599252][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 189.854016][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 189.882047][T10538] openvswitch: netlink: Flow actions attr not present in new flow. [ 189.909880][T10541] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.0'. [ 189.949005][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 189.980034][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 189.980535][T10538] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 190.434892][T10555] "syz-executor.3" (10555) uses obsolete ecb(arc4) skcipher [ 190.628722][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 190.722391][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 190.808180][T10574] vxcan3: entered promiscuous mode [ 191.540218][ T5111] Bluetooth: hci5: command 0x0406 tx timeout [ 191.559284][T10611] hsr0: entered promiscuous mode [ 191.847306][T10624] Cannot find del_set index 3 as target [ 192.060282][T10641] batadv_slave_1: entered promiscuous mode [ 192.084873][T10640] batadv_slave_1: left promiscuous mode [ 192.763769][T10674] [ 192.766146][T10674] ====================================================== [ 192.773168][T10674] WARNING: possible circular locking dependency detected [ 192.780187][T10674] 6.10.0-rc1-syzkaller-00239-g93e30878f7ec #0 Not tainted [ 192.787299][T10674] ------------------------------------------------------ [ 192.794319][T10674] syz-executor.0/10674 is trying to acquire lock: [ 192.800735][T10674] ffff888029681218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{2:2}, at: __dev_queue_xmit+0x22f5/0x3d30 2024/06/03 21:36:43 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 192.812964][T10674] [ 192.812964][T10674] but task is already holding lock: [ 192.820335][T10674] ffff888066a1f0d8 (&qdisc_xmit_lock_key#3){+.-.}-{2:2}, at: sch_direct_xmit+0x1c4/0x5f0 [ 192.830205][T10674] [ 192.830205][T10674] which lock already depends on the new lock. [ 192.830205][T10674] [ 192.840612][T10674] [ 192.840612][T10674] the existing dependency chain (in reverse order) is: [ 192.849664][T10674] [ 192.849664][T10674] -> #1 (&qdisc_xmit_lock_key#3){+.-.}-{2:2}: [ 192.857945][T10674] lock_acquire+0x1ed/0x550 [ 192.862990][T10674] _raw_spin_lock+0x2e/0x40 [ 192.868025][T10674] sch_direct_xmit+0x1c4/0x5f0 [ 192.873321][T10674] __dev_queue_xmit+0x1a24/0x3d30 [ 192.878877][T10674] ip6_finish_output2+0xff8/0x1670 [ 192.884521][T10674] ip6_finish_output+0x41e/0x810 [ 192.889990][T10674] NF_HOOK+0x9e/0x430 [ 192.894502][T10674] mld_sendpack+0x838/0xda0 [ 192.899536][T10674] mld_ifc_work+0x7d6/0xd90 [ 192.904659][T10674] process_scheduled_works+0xa2c/0x1830 [ 192.910738][T10674] worker_thread+0x86d/0xd70 [ 192.915858][T10674] kthread+0x2f0/0x390 [ 192.920462][T10674] ret_from_fork+0x4b/0x80 [ 192.925420][T10674] ret_from_fork_asm+0x1a/0x30 [ 192.930727][T10674] [ 192.930727][T10674] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{2:2}: [ 192.941095][T10674] validate_chain+0x18e0/0x5900 [ 192.946487][T10674] __lock_acquire+0x1346/0x1fd0 [ 192.951876][T10674] lock_acquire+0x1ed/0x550 [ 192.956911][T10674] _raw_spin_lock+0x2e/0x40 [ 192.961945][T10674] __dev_queue_xmit+0x22f5/0x3d30 [ 192.967501][T10674] ip6_finish_output2+0xff8/0x1670 [ 192.973149][T10674] ip6_finish_output+0x41e/0x810 [ 192.978618][T10674] ndisc_send_skb+0xab0/0x1380 [ 192.983917][T10674] ndisc_solicit+0x493/0x6a0 [ 192.989041][T10674] __neigh_event_send+0xec8/0x15a0 [ 192.994689][T10674] neigh_resolve_output+0x1b5/0x740 [ 193.000427][T10674] ip6_finish_output2+0xff8/0x1670 [ 193.006076][T10674] ip6_finish_output+0x41e/0x810 [ 193.011545][T10674] ip6_send_skb+0x112/0x230 [ 193.016579][T10674] icmp6_send+0x15fc/0x2070 [ 193.021621][T10674] ip6_link_failure+0x3c/0x4f0 [ 193.026914][T10674] ip_tunnel_xmit+0x164f/0x2940 [ 193.032299][T10674] __gre_xmit+0x1cf/0x260 [ 193.037248][T10674] erspan_xmit+0xaba/0x1310 [ 193.042288][T10674] dev_hard_start_xmit+0x27a/0x7e0 [ 193.047942][T10674] sch_direct_xmit+0x2b6/0x5f0 [ 193.053231][T10674] __dev_queue_xmit+0x1ce4/0x3d30 [ 193.058779][T10674] ip6_finish_output2+0xff8/0x1670 [ 193.064427][T10674] ip6_finish_output+0x41e/0x810 [ 193.069901][T10674] rawv6_send_hdrinc+0xcfc/0x1880 [ 193.075461][T10674] rawv6_sendmsg+0x1962/0x23c0 [ 193.080758][T10674] __sock_sendmsg+0x1a6/0x270 [ 193.085979][T10674] ____sys_sendmsg+0x525/0x7d0 [ 193.091279][T10674] __sys_sendmsg+0x2b0/0x3a0 [ 193.096398][T10674] do_syscall_64+0xf3/0x230 [ 193.101435][T10674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.107856][T10674] [ 193.107856][T10674] other info that might help us debug this: [ 193.107856][T10674] [ 193.118085][T10674] Possible unsafe locking scenario: [ 193.118085][T10674] [ 193.125534][T10674] CPU0 CPU1 [ 193.130902][T10674] ---- ---- [ 193.136266][T10674] lock(&qdisc_xmit_lock_key#3); [ 193.141309][T10674] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2); [ 193.150955][T10674] lock(&qdisc_xmit_lock_key#3); [ 193.158523][T10674] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2); [ 193.165655][T10674] [ 193.165655][T10674] *** DEADLOCK *** [ 193.165655][T10674] [ 193.173802][T10674] 10 locks held by syz-executor.0/10674: [ 193.179433][T10674] #0: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: rawv6_send_hdrinc+0xb7a/0x1880 [ 193.189221][T10674] #1: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: ip6_finish_output2+0x712/0x1670 [ 193.199084][T10674] #2: ffffffff8e333fc0 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x2d2/0x3d30 [ 193.209034][T10674] #3: ffff888066a1f0d8 (&qdisc_xmit_lock_key#3){+.-.}-{2:2}, at: sch_direct_xmit+0x1c4/0x5f0 [ 193.219335][T10674] #4: ffff88802a308918 (k-slock-AF_INET6){+.-.}-{2:2}, at: icmp6_send+0xc45/0x2070 [ 193.228780][T10674] #5: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: icmp6_send+0xba4/0x2070 [ 193.237955][T10674] #6: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: ip6_finish_output2+0x712/0x1670 [ 193.247826][T10674] #7: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: ndisc_send_skb+0x572/0x1380 [ 193.257351][T10674] #8: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: ip6_finish_output2+0x712/0x1670 [ 193.267243][T10674] #9: ffffffff8e333fc0 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x2d2/0x3d30 [ 193.277216][T10674] [ 193.277216][T10674] stack backtrace: [ 193.283134][T10674] CPU: 1 PID: 10674 Comm: syz-executor.0 Not tainted 6.10.0-rc1-syzkaller-00239-g93e30878f7ec #0 [ 193.293644][T10674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 193.303719][T10674] Call Trace: [ 193.307005][T10674] [ 193.309945][T10674] dump_stack_lvl+0x241/0x360 [ 193.314640][T